HP 3PAR StoreServ 7200 2-node - Configuring Group Location Parameters; Configuring Group-To-Role Mapping Parameters

3. Issue the setauthparam user-attr <attribute> command, where <attribute> is
the name of the attribute holding the user’s <user_name>.
Example:
system1 cli% setauthparam -f binding simple
In the example above, simple binding is specified as the binding mechanism.
system1 cli% setauthparam -f user-dn-base ou=people,dc=ldaptest,dc=3par,dc=com
In the example above, the base of the user entries in the OpenLDAP server directory information
tree is ou=people,dc=ldaptest,dc=3par,dc=com.
system1 cli% setauthparam -f user-attr uid
In the example above, uid is the attribute with the value of the user’s user name of the
posixAccount object class.
Configuring Group Location Parameters
To configure group location parameters, perform the following:
1. Issue the setauthparam groups-dn <value> command, where <value> is the basis
of the search for objects holding group information in the subtree of the directory information
tree.
2. Issue the setauthparam group-object <group_object_class> command.
3. Issue the setauthparam group-name-attr <attribute> command, where
<attribute> is the group object’s attribute that holds the group name.
4. Issue the setauthparam member-attr <member_attribute> command, where
<member_attribute> is attribute that holds the names of the users in the group.
Example:
system1 cli% setauthparam -f groups-dn ou=groups,dc=ldaptest,dc=3par,dc=com
In the example above, ou=groups,dc=ldaptest,dc=3par,dc=com is the search base
for objects holding group information in the directory information subtree.
system1 cli% setauthparam -f group-obj posixGroup
system1 cli% setauthparam -f group-name-attr cn
system1 cli% setauthparam -f member-attr memberUid
In the example above:
• posixGroup is the group object class.
• cn is the attribute of the posixGroup, which has a value of the group’s name.
• memberUid is the attribute with the value of the user’s <user_name>.
Configuring Group-To-Role Mapping Parameters
Once you have configured the group location parameters, you must now decide what role you
wish to assign the users for a given group. To configure group-to-role mapping:
Configuring LDAP Connections 35